chore(deps): bump csv-parse from 5.5.6 to 7.0.2

[dependabot]

Bumps csv-parse from 5.5.6 to 7.0.2.

Changelog

Sourced from csv-parse's changelog.

7.0.2 (2026-08-02)

Bug Fixes

• csv-parse: prototype replacement reachable via columns (#497)

Performance Improvements

• csv-parse: avoid unnecessary allocation in ResizeableBuffer.toString (#495)

7.0.1 (2026-07-02)

Bug Fixes

• csv-parse: ship stream cjs export (#490)

7.0.0 (2026-06-14)

⚠ WARNING

This version was published by mistake, there is no breaking changes. Also, for some reason, the associated version's changelog included many commit messages from version 6.0.0.

Features

• csv-parse: delimiter discover (fix #400)
• csv-parse: delimiter_auto sample
• csv-parse: desactivate delimiter splitting when empty array
• csv-parse: dont modify prototype in sync (see #479)
• csv-parse: export CsvError and normalize_options
• csv-parse: remove comment about sync parse old usage

Bug Fixes

• csv-parse: align trim with ECMAScript whitespace (fix #482) (#483)

6.2.1 (2026-03-20)

Bug Fixes

• csv-parse: prototype pollution with objname option (fix #479)

6.2.0 (2026-03-17)

Features

• csv-parse: alig info interfaces with js api
• csv-parse: info bytes_records (fix #446)
• csv-parse: remove non-existing ts function declaration
• csv-parse: remove ts usage of all in error type
• csv-parse: returned type generic for on_record (fix #461 #464 #466) (#468)

... (truncated)

Commits

• 288c9c6 chore(release): publish
• 2ad6c07 refactor(csv-parse): rename group_columns_by_name tests
• eb4d148 fix(csv-parse): prototype replacement reachable via columns (#497)
• 1d4ed3b perf(csv-parse): avoid unnecessary allocation in ResizeableBuffer.toString (#...
• 6e0d5a3 chore(release): publish
• abfe4de build: latest dependencies
• a5ef896 docs(csv-parse): fix changelog message from previous version
• 230af8e fix(csv-parse): ship stream cjs export (#490)
• 3d71f0b chore(release): publish
• 2ba4897 build: use ts nodenext
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for csv-parse since your current version.

[cursor]

PR Summary

Medium Risk
Major-version bump on a library used for CSV imports and worker pipelines; security fixes are beneficial but parsing/trim behavior changes warrant spot-checking affected scripts.

Overview
Upgrades the csv-parse dependency from 5.5.6 to 7.0.2 in backend, automatic_projects_discovery_worker, and script_executor_worker, with matching pnpm-lock.yaml updates. There are no application code changes in this PR.

Call sites keep using csv-parse/sync in backend import scripts and the streaming parse() API in the discovery and script-executor workers. The newer releases include CSV parsing security fixes (prototype pollution via columns / objname) and minor behavior tweaks such as ECMAScript-aligned trim, which could affect edge cases in those import/onboarding flows after deploy.

^{Reviewed by Cursor Bugbot for commit a70acbc. Bugbot is set up for automated code reviews on this repo. Configure here.}

[github-actions]

⚠️ Jira Issue Key Missing

Your PR title doesn't contain a Jira issue key. Consider adding it for better traceability.

Example:

• feat: add user authentication (CM-123)
• feat: add user authentication (IN-123)

Projects:

• CM: Community Data Platform
• IN: Insights

Please add a Jira issue key to your PR title.

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}